Close Open Privacy Scan

link https://github.com/vllm-project/vllm
bolt Snapshot: commit c7ce03b
science engine v1.21
schedule 2026-07-18T14:07:25.102290+00:00

help Not analyzed — coverage too low to judge

Too little of this repository was analyzed to judge — 2/97 dependencies were scanned. This is not a clean result; it means the scan could not run far enough to reach one.

smart_toy AI deps detected: openai — detected in dependencies, not a safety judgment.

App Privacy Score

— /100
Not analyzed — coverage too low

Coverage too low to score · 81 finding(s)

bar_chart Score Breakdown

telemetry −5
env_fs −3

list Scan Summary

0 high 0 medium 81 low
First-party packages: 7
Dependency packages: 0
Ecosystem: rust

swap_horiz Application data flows

Not enough of this repository was analyzed to look for application data flows. Absence of findings here is not evidence of a clean result.

</> First-Party Code

first-party (rust): rust/src/bench

rust first-party
expand_more 26 low-confidence finding(s)
low env_fs production #b899c2bbc0a185e1 — Environment-variable access.
repo/rust/src/bench/src/backends/mod.rs:185 
    API_KEY.get_or_init(|| std::env::var("OPENAI_API_KEY").ok())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c28a75c9ebc7b431 — Environment-variable access.
repo/rust/src/bench/src/benchmark.rs:122 
    if let Ok(api_key) = std::env::var("OPENAI_API_KEY") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #773d5d64880f3950 — Environment-variable access.
repo/rust/src/bench/src/benchmark.rs:297 
    if let Ok(api_key) = std::env::var("OPENAI_API_KEY") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee8b32f7156c758e — Environment-variable access.
repo/rust/src/bench/src/benchmark.rs:1329 
    if let Ok(api_key) = std::env::var("OPENAI_API_KEY") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #561fcfa303aa404e — Environment-variable access.
repo/rust/src/bench/src/benchmark.rs:1443 
    let api_key = Arc::new(std::env::var("OPENAI_API_KEY").ok());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78cfa219771b5e8d — Filesystem access.
repo/rust/src/bench/src/benchmark.rs:1790 
    let _ = std::fs::write(dir.join(cache_key), "");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #084881840b0c7a72 — Environment-variable access.
repo/rust/src/bench/src/benchmark.rs:1819 
    let api_key = std::env::var("OPENAI_API_KEY").ok();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aaa94c3e436a1786 — Filesystem access.
repo/rust/src/bench/src/compare.rs:274 
    let content = std::fs::read_to_string(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cad99e3d25393e73 — Filesystem access.
repo/rust/src/bench/src/datasets/custom.rs:46 
    let content = std::fs::read_to_string(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b62c110cecd7ce8e — Filesystem access.
repo/rust/src/bench/src/datasets/custom.rs:125 
        std::fs::write(&path, content).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d1165a980fa174b — Environment-variable access.
repo/rust/src/bench/src/datasets/hf_dataset.rs:121 
    if let Ok(token) = std::env::var("HF_TOKEN") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b08f62f567458119 — Filesystem access.
repo/rust/src/bench/src/datasets/hf_dataset.rs:280 
    std::fs::write(&cache_path, &json_str)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43e7a151e386e813 — Filesystem access.
repo/rust/src/bench/src/datasets/hf_dataset.rs:468 
    let content = std::fs::read_to_string(dataset_path).map_err(|e| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb2614aebd70fcb0 — Filesystem access.
repo/rust/src/bench/src/datasets/hf_dataset.rs:1012 
        std::fs::write(&path, serde_json::to_string(data).unwrap()).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4dc67d05d666db98 — Filesystem access.
repo/rust/src/bench/src/datasets/multi_turn.rs:340 
    let content = std::fs::read_to_string(dataset_path).map_err(|e| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0c5b69cadb98e84 — Filesystem access.
repo/rust/src/bench/src/datasets/sharegpt.rs:54 
    let content = std::fs::read_to_string(dataset_path).map_err(|e| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #73cf8d59848ff81a — Filesystem access.
repo/rust/src/bench/src/datasets/sonnet.rs:45 
        Some(path) => std::fs::read_to_string(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1129d64927b36278 — Filesystem access.
repo/rust/src/bench/src/datasets/speed_bench.rs:137 
    std::fs::write(&cache_path, &json_str)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07c74f6ebb891cbf — Filesystem access.
repo/rust/src/bench/src/datasets/speed_bench.rs:163 
    let content = std::fs::read_to_string(dataset_path).map_err(|e| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1d976938c618bc7 — Environment-variable access.
repo/rust/src/bench/src/multi_turn.rs:750 
    if let Ok(api_key) = std::env::var("OPENAI_API_KEY") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad21b8e9cc1cc4e1 — Filesystem access.
repo/rust/src/bench/src/output/json.rs:605 
    std::fs::write(file_path, content)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #874105fa7daa8c31 — Filesystem access.
repo/rust/src/bench/src/tiktoken.rs:44 
        let content = std::fs::read_to_string(model_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #374b85b0b3891f32 — Filesystem access.
repo/rust/src/bench/src/tiktoken.rs:333 
    let content = std::fs::read_to_string(model_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc47be82ac69e908 — Filesystem access.
repo/rust/src/bench/src/tiktoken.rs:355 
    let content = std::fs::read_to_string(config_path).ok()?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d98bc945ecfb230 — Filesystem access.
repo/rust/src/bench/src/tiktoken.rs:392 
            std::fs::read_to_string(p)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4043a3c4fff6750c — Filesystem access.
repo/rust/src/bench/src/tiktoken.rs:404 
    let source = std::fs::read_to_string(&py_path).ok()?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (rust): rust/src/chat

rust first-party
expand_more 17 low-confidence finding(s)
low env_fs production #3449f92182b947a9 — Filesystem access.
repo/rust/src/chat/src/backend/hf.rs:189 
        std::fs::write(path, content).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c4beaa04ce58ba6c — Filesystem access.
repo/rust/src/chat/src/multimodal.rs:227 
        let text = fs::read_to_string(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ef56ee9cab9feee — Filesystem access.
repo/rust/src/chat/src/multimodal.rs:237 
    let text = fs::read_to_string(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4df0ae7e19b5538f — Filesystem access.
repo/rust/src/chat/src/multimodal.rs:293 
                let text = fs::read_to_string(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5512e160bf9b8feb — Filesystem access.
repo/rust/src/chat/src/multimodal/video.rs:193 
        std::fs::write(
            &config_path,
            serde_json::json!({
                "model_type": "qwen3_vl",
                "image_token_id": QWEN3_IMAGE_PAD_ID,
                "video_token_id": QWEN3_VIDEO_PAD_ID,
            })
            .to_string(),
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f98f2d9d8bcb070d — Filesystem access.
repo/rust/src/chat/src/multimodal/video.rs:215 
        std::fs::write(&video_config_path, r#"{"size":{"shortest_edge":128}}"#).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed712f931f6141eb — Filesystem access.
repo/rust/src/chat/src/multimodal/video.rs:227 
        std::fs::write(
            &processor_config_path,
            r#"{"video_processor":{"size":{"shortest_edge":128}}}"#,
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78df98abf812955d — Filesystem access.
repo/rust/src/chat/src/multimodal/video.rs:251 
        std::fs::write(&video_config_path, r#"{"size""#).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c42348775dd2b2b — Environment-variable access.
repo/rust/src/chat/src/renderer/harmony/mod.rs:467 
    std::env::var(SYSTEM_START_DATE_ENV)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5d2a3579e7b2813e — Environment-variable access.
repo/rust/src/chat/src/renderer/harmony/mod.rs:483 
    std::env::var(HARMONY_SYSTEM_INSTRUCTIONS_ENV)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a07d7b4f4f5b7618 — Filesystem access.
repo/rust/src/chat/src/renderer/hf/format.rs:286 
        fs::read_to_string(vllm_examples_dir().join(relative_path))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #150bf77ad3006ded — Filesystem access.
repo/rust/src/chat/src/renderer/hf/template.rs:59 
    let content = fs::read_to_string(template_path).map_err(TemplateError::ReadTemplateFile)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #526f00b621a6aba9 — Filesystem access.
repo/rust/src/chat/src/renderer/hf/template.rs:251 
        fs::write(&path, "{{ messages }}").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #748e0217f9dc2c8e — Filesystem access.
repo/rust/src/chat/src/renderer/hf/template.rs:269 
        fs::write(&path, "{{ messages }}").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86c8cd2b8773c698 — Filesystem access.
repo/rust/src/chat/src/renderer/hf/template.rs:298 
        fs::write(&path, "\"{{ messages }}\"").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #244c3cb01da90632 — Filesystem access.
repo/rust/src/chat/src/renderer/hf/template.rs:309 
        fs::write(&path, r#"{"chat_template":"{{ messages }}"}"#).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e7b018cf42c2e535 — Filesystem access.
repo/rust/src/chat/src/renderer/test_utils.rs:29 
    let fixture = fs::read_to_string(path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (rust): rust/src/cmd

rust first-party
expand_more 6 low-confidence finding(s)
low env_fs production #7a9014615cffdde6 — Environment-variable access.
repo/rust/src/cmd/src/cli.rs:349 
            && let Ok(api_key) = std::env::var("VLLM_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #616f5a62a6652002 — Environment-variable access.
repo/rust/src/cmd/src/cli.rs:681 
    let preferred_base_path = std::env::var_os("VLLM_RPC_BASE_PATH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #528824c9e89017ef — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/rust/src/cmd/src/cli/unsupported.rs:67 
    tracing::warn!("argument '{arg}' currently has no effect in Rust frontend, ignoring");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs production #6d9520360fbdd0d2 — Environment-variable access.
repo/rust/src/cmd/src/logging.rs:34 
        env::var("VLLM_LOGGING_LEVEL").ok().as_deref(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf37ef6629186cc0 — Environment-variable access.
repo/rust/src/cmd/src/logging.rs:35 
        env::var("RUST_LOG").ok().as_deref(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c12a463c3767e206 — Environment-variable access.
repo/rust/src/cmd/src/main.rs:28 
    if env::var_os(TOKIO_WORKER_THREADS_ENV).is_some() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (rust): rust/src/engine-core-client

rust first-party
expand_more 1 low-confidence finding(s)
low env_fs production #0195805ebef54814 — Environment-variable access.
repo/rust/src/engine-core-client/src/runtime.rs:73 
    std::env::var(ZMQ_WORKER_THREADS_ENV)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (rust): rust/src/server

rust first-party
expand_more 8 low-confidence finding(s)
low env_fs production #4a4a465a78cf8782 — Environment-variable access.
repo/rust/src/server/build.rs:5 
    let manifest_dir = std::env::var("CARGO_MANIFEST_DIR").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #815f14e4fff9e968 — Environment-variable access.
repo/rust/src/server/src/routes.rs:36 
    std::env::var("VLLM_SERVER_DEV_MODE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18334b320d3bc1c0 — Environment-variable access.
repo/rust/src/server/src/routes.rs:43 
    std::env::var("VLLM_ALLOW_RUNTIME_LORA_UPDATING")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a6de9a972655dd5 — Environment-variable access.
repo/rust/src/server/src/routes/lora.rs:42 
    let prefixes = std::env::var_os(RUNTIME_LORA_ALLOWED_PATH_PREFIXES_ENV)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f42e824d115a8b9f — Filesystem access.
repo/rust/src/server/src/routes/tests.rs:570 
    fs::write(
        &config_path,
        r#"{"model_type":"qwen2_vl","image_token_id":151655}"#,
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c694a44dc6b9258 — Environment-variable access.
repo/rust/src/server/src/runtime.rs:33 
    if let Some(value) = std::env::var_os(REQUEST_WORKER_THREADS_ENV) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5e808e2fc9ddeedd — Environment-variable access.
repo/rust/src/server/src/server_info.rs:76 
    std::env::vars().filter(|(key, _)| is_public_vllm_env_key(key)).collect()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d83458c588bf54f — Filesystem access.
repo/rust/src/server/src/tls_tests.rs:82 
            std::fs::write(dir.path().join(name), contents).expect("write fixture");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (rust): rust/src/text

rust first-party
expand_more 5 low-confidence finding(s)
low env_fs production #5e0d15c7638936f7 — Filesystem access.
repo/rust/src/text/src/backend/hf/config.rs:279 
    let content = fs::read_to_string(path).map_err(|error| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6cb3724cb92b3d5e — Environment-variable access.
repo/rust/src/text/src/backend/hf/model_files.rs:320 
    if let Ok(token) = std::env::var(HF_TOKEN_ENV)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd207bef5154b0b2 — Filesystem access.
repo/rust/src/text/src/backend/hf/model_files.rs:400 
        fs::write(dir.path().join("tokenizer.json"), "{}").expect("write tokenizer");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27f76be160ca0195 — Filesystem access.
repo/rust/src/text/src/backend/hf/model_files.rs:401 
        fs::write(
            dir.path().join("tokenizer_config.json"),
            r#"{"tokenizer_class":"TokenizersBackend"}"#,
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91e8688b65fc3102 — Filesystem access.
repo/rust/src/text/src/backend/hf/model_files.rs:406 
        fs::write(dir.path().join("config.json"), "{}").expect("write config");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (rust): rust/src/tokenizer

rust first-party
expand_more 18 low-confidence finding(s)
low env_fs production #358742f31f50904d — Filesystem access.
repo/rust/src/tokenizer/src/hf.rs:275 
        std::fs::write(
            dir.path().join("tokenizer_config.json"),
            r#"{
                "added_tokens_decoder": {
                    "9": {
                        "content": "<|image_pad|>",
                        "special": true,
                        "normalized": false
                    }
                }
            }"#,
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5473188d0851fabb — Filesystem access.
repo/rust/src/tokenizer/src/hf/added_tokens.rs:61 
    let tokenizer_json = fs::read_to_string(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2a885529d538220 — Filesystem access.
repo/rust/src/tokenizer/src/hf/added_tokens.rs:88 
    let text = fs::read_to_string(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ecf3ff50b7475c2 — Environment-variable access.
repo/rust/src/tokenizer/src/tiktoken.rs:262 
        if std::env::var_os(DISABLE_RIPTOKEN_ENV).is_some() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a927574f306e33d — Filesystem access.
repo/rust/src/tokenizer/src/tiktoken.rs:344 
        let content = std::fs::read_to_string(path).map_err(|error| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0efa3e8653c589b — Filesystem access.
repo/rust/src/tokenizer/src/tiktoken.rs:379 
                let content = std::fs::read_to_string(&config_path).ok()?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ddc258dba27f59b3 — Filesystem access.
repo/rust/src/tokenizer/src/tiktoken.rs:389 
                let content = std::fs::read_to_string(&config_path).ok()?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36828a53d4af6a9e — Filesystem access.
repo/rust/src/tokenizer/src/tiktoken.rs:564 
        fs::write(&path, content).expect("write tiktoken file");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ef0f668e28b287f — Filesystem access.
repo/rust/src/tokenizer/src/tiktoken.rs:585 
        fs::write(&path, content).expect("write sparse-rank tiktoken file");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ddc5190a0d59fa43 — Filesystem access.
repo/rust/src/tokenizer/src/tiktoken.rs:650 
        fs::write(dir.path().join("config.json"), r#"{"vocab_size": 280}"#)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #95e5f6b23bc30443 — Filesystem access.
repo/rust/src/tokenizer/src/tiktoken.rs:688 
        fs::write(dir.path().join("config.json"), r#"{"vocab_size": 1002}"#)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #801155051864a8fe — Filesystem access.
repo/rust/src/tokenizer/src/tiktoken.rs:716 
        fs::write(
            dir.path().join("tokenizer_config.json"),
            r#"{
                "added_tokens_decoder": {
                    "257": { "content": "<|im_end|>", "special": true },
                    "258": { "content": "<|tool_call_begin|>", "special": false }
                }
            }"#,
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b751871b6a5ce707 — Filesystem access.
repo/rust/src/tokenizer/src/tiktoken.rs:726 
        fs::write(dir.path().join("config.json"), r#"{"vocab_size": 260}"#)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b417e586f77db08a — Filesystem access.
repo/rust/src/tokenizer/src/tiktoken.rs:761 
        fs::write(
            dir.path().join("config.json"),
            r#"{"text_config": {"vocab_size": 270}}"#,
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5dfab756180661bc — Filesystem access.
repo/rust/src/tokenizer/src/tiktoken.rs:969 
        fs::write(
            dir.path().join("tokenizer_config.json"),
            r#"{
                "added_tokens_decoder": {
                    "257": { "content": "<think>", "special": false },
                    "258": { "content": "</think>", "special": false }
                }
            }"#,
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #330605931aed1b39 — Filesystem access.
repo/rust/src/tokenizer/src/tiktoken.rs:979 
        fs::write(dir.path().join("config.json"), r#"{"vocab_size": 259}"#)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e9eae9a5ddc5ef4 — Filesystem access.
repo/rust/src/tokenizer/src/tiktoken.rs:998 
        fs::write(
            dir.path().join("tokenizer_config.json"),
            r#"{
                "added_tokens_decoder": {
                    "257": { "content": "<think>", "special": false }
                }
            }"#,
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b4c92eca6a43cc6 — Filesystem access.
repo/rust/src/tokenizer/src/tiktoken.rs:1007 
        fs::write(dir.path().join("config.json"), r#"{"vocab_size": 258}"#)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • anyhow prod — no version pinned
  • base64 prod — no version pinned
  • bytes prod — no version pinned
  • chrono prod — no version pinned
  • clap prod — no version pinned
  • dirs prod — no version pinned
  • futures prod — no version pinned
  • hf-hub prod — no version pinned
  • image prod — no version pinned
  • indicatif prod — no version pinned
  • mimalloc prod — no version pinned
  • rand prod — no version pinned
  • rand_distr prod — no version pinned
  • rayon prod — no version pinned
  • reqwest prod — no version pinned
  • rlimit prod — no version pinned
  • rustc-hash prod — no version pinned
  • serde prod — no version pinned
  • serde_json prod — no version pinned
  • thiserror prod — no version pinned
  • tiktoken-rs prod — no version pinned
  • tokenizers prod — no version pinned
  • tokio prod — no version pinned
  • tokio-stream prod — no version pinned
  • url prod — no version pinned
  • uuid prod — no version pinned
  • asynk-strim-attr prod — no version pinned
  • easy-ext prod — no version pinned
  • half prod — no version pinned
  • indexmap prod — no version pinned
  • itertools prod — no version pinned
  • llm-multimodal prod — no version pinned
  • minijinja prod — no version pinned
  • minijinja-contrib prod — no version pinned
  • openai-harmony prod — no version pinned
  • reqwest-0-13 prod — no version pinned
  • serde-json-fmt prod — no version pinned
  • serde_with prod — no version pinned
  • strum prod — no version pinned
  • subenum prod — no version pinned
  • thiserror-ext prod — no version pinned
  • time prod — no version pinned
  • tracing prod — no version pinned
  • trait-set prod — no version pinned
  • vllm-engine-core-client prod — no version pinned
  • vllm-llm prod — no version pinned
  • vllm-parser prod — no version pinned
  • vllm-text prod — no version pinned
  • vllm-tokenizer prod — no version pinned
  • xgrammar-structural-tag prod — no version pinned
  • educe prod — no version pinned
  • native-tls-vendored prod — no version pinned
  • tokio-util prod — no version pinned
  • vllm-chat prod — no version pinned
  • vllm-managed-engine prod — no version pinned
  • vllm-server prod — no version pinned
  • arc-swap prod — no version pinned
  • bytemuck prod — no version pinned
  • byteorder prod — no version pinned
  • enum-as-inner prod — no version pinned
  • hex prod — no version pinned
  • parking_lot prod — no version pinned
  • rmpv prod — no version pinned
  • serde_default prod — no version pinned
  • serde_repr prod — no version pinned
  • serde_tuple prod — no version pinned
  • task-local prod — no version pinned
  • vllm-metrics prod — no version pinned
  • libc prod — no version pinned
  • prometheus-client prod — no version pinned
  • winnow prod — no version pinned
  • pyo3 prod — no version pinned
  • pythonize prod — no version pinned
  • auto_enums prod — no version pinned
  • axum prod — no version pinned
  • http-body prod — no version pinned
  • hyper prod — no version pinned
  • hyper-util prod — no version pinned
  • openssl prod — no version pinned
  • prost prod — no version pinned
  • prost-types prod — no version pinned
  • sha2 prod — no version pinned
  • socket2 prod — no version pinned
  • subtle prod — no version pinned
  • tls-listener prod — no version pinned
  • tokio-openssl prod — no version pinned
  • tonic prod — no version pinned
  • tonic-prost prod — no version pinned
  • tower prod — no version pinned
  • tower-http prod — no version pinned
  • tracing-futures prod — no version pinned
  • validator prod — no version pinned
  • fastokens prod — no version pinned
  • riptoken prod — no version pinned
  • tekken prod — no version pinned